./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor960699322
<...>
DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b
forked to background, child pid 4659
[ 39.181848][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 39.214788][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts.
execve("./syz-executor960699322", ["./syz-executor960699322"], 0x7ffd8c82c750 /* 10 vars */) = 0
brk(NULL) = 0x555555cde000
brk(0x555555cdec40) = 0x555555cdec40
arch_prctl(ARCH_SET_FS, 0x555555cde300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor960699322", 4096) = 27
brk(0x555555cffc40) = 0x555555cffc40
brk(0x555555d00000) = 0x555555d00000
mprotect(0x7fcc05457000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcbfcf99000
syzkaller login: [ 68.145305][ T4994] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4994 'syz-executor960'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fcbfcf99000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 68.308279][ T4994] loop0: detected capacity change from 0 to 32768
[ 68.320515][ T4994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor960 (4994)
[ 68.340017][ T4994] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./file0", O_RDONLY) = 4
[ 68.349193][ T4994] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 68.360105][ T4994] BTRFS info (device loop0): doing ref verification
[ 68.366814][ T4994] BTRFS info (device loop0): using free space tree
[ 68.388865][ T4994] BTRFS info (device loop0): enabling ssd optimizations
[ 68.395907][ T4994] BTRFS info (device loop0): auto enabling async discard
[ 68.435524][ T4994] BTRFS info (device loop0): balance: start -f -susage=6,vrange=0..9223372036854775809
[ 68.449214][ T4994] ------------[ cut here ]------------
[ 68.454954][ T4994] BTRFS: Transaction aborted (error -28)
[ 68.461057][ T4994] WARNING: CPU: 0 PID: 4994 at fs/btrfs/block-group.c:2610 btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.472625][ T4994] Modules linked in:
[ 68.476611][ T4994] CPU: 0 PID: 4994 Comm: syz-executor960 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0
[ 68.487153][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 68.497294][ T4994] RIP: 0010:btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.504746][ T4994] Code: 00 0f 2c 8b ba 39 0a 00 00 44 89 f9 e8 94 86 01 07 e9 26 f5 ff ff e8 6a 5c df fd 48 c7 c7 80 0e 2c 8b 44 89 fe e8 db db a6 fd <0f> 0b e9 d5 fe ff ff e8 4f 5c df fd 48 c7 c7 80 0e 2c 8b 44 89 e6
[ 68.524664][ T4994] RSP: 0018:ffffc900039bf6e0 EFLAGS: 00010246
[ 68.530791][ T4994] RAX: 16975f9793f65200 RBX: ffff88807384c001 RCX: ffff888028d68000
[ 68.538916][ T4994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 68.547182][ T4994] RBP: ffffc900039bf978 R08: ffffffff81530142 R09: fffff52000737e91
[ 68.555262][ T4994] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 68.563282][ T4994] R13: ffff888015fde9c0 R14: dffffc0000000000 R15: 00000000ffffffe4
[ 68.571394][ T4994] FS: 0000555555cde300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 68.580534][ T4994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.587343][ T4994] CR2: 00007ffd8c82ae18 CR3: 00000000757bd000 CR4: 00000000003506f0
[ 68.595395][ T4994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.603409][ T4994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.611520][ T4994] Call Trace:
[ 68.614872][ T4994]
[ 68.617838][ T4994] ? __warn+0x162/0x4a0
[ 68.622053][ T4994] ? btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.628872][ T4994] ? report_bug+0x2b3/0x500
[ 68.633422][ T4994] ? btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.640204][ T4994] ? handle_bug+0x3d/0x70
[ 68.644654][ T4994] ? exc_invalid_op+0x1a/0x50
[ 68.649358][ T4994] ? asm_exc_invalid_op+0x1a/0x20
[ 68.654454][ T4994] ? __warn_printk+0x292/0x360
[ 68.659258][ T4994] ? btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.666021][ T4994] ? __lock_acquire+0x1316/0x2070
[ 68.671102][ T4994] ? btrfs_inc_block_group_ro+0x5a4/0x610
[ 68.676885][ T4994] ? fill_dummy_bgs+0x2a0/0x2a0
[ 68.681767][ T4994] ? btrfs_block_rsv_add+0xb1/0xc0
[ 68.686979][ T4994] ? __lock_acquire+0x2070/0x2070
[ 68.692030][ T4994] ? do_raw_spin_lock+0x14d/0x3a0
[ 68.697129][ T4994] ? __mutex_unlock_slowpath+0x21c/0x750
[ 68.702801][ T4994] ? mutex_unlock+0x10/0x10
[ 68.707399][ T4994] ? btrfs_trans_release_metadata+0x153/0x1b0
[ 68.713506][ T4994] __btrfs_end_transaction+0x150/0x640
[ 68.719124][ T4994] btrfs_inc_block_group_ro+0x5ac/0x610
[ 68.724785][ T4994] btrfs_relocate_block_group+0x43b/0xd70
[ 68.730531][ T4994] btrfs_relocate_chunk+0x12c/0x3b0
[ 68.735798][ T4994] __btrfs_balance+0x1b06/0x2690
[ 68.740833][ T4994] ? describe_balance_start_or_resume+0x490/0x490
[ 68.747352][ T4994] ? do_wait_for_common+0x590/0x5f0
[ 68.752587][ T4994] ? do_raw_spin_unlock+0x13b/0x8b0
[ 68.757875][ T4994] ? validate_convert_profile+0x7d/0x2c0
[ 68.763553][ T4994] btrfs_balance+0xbdb/0x1120
[ 68.768346][ T4994] btrfs_ioctl_balance+0x493/0x7c0
[ 68.773487][ T4994] ? btrfs_ioctl+0xb88/0xd40
[ 68.778146][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 68.784669][ T4994] __se_sys_ioctl+0xf1/0x160
[ 68.789276][ T4994] do_syscall_64+0x41/0xc0
[ 68.793705][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 68.799692][ T4994] RIP: 0033:0x7fcc053e5b09
[ 68.804225][ T4994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 68.823924][ T4994] RSP: 002b:00007ffc08bb1b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.832363][ T4994] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fcc053e5b09
[ 68.840399][ T4994] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004
[ 68.848481][ T4994] RBP: 00007fcc053a53a0 R08: 0000000000000000 R09: 0000000000000000
[ 68.856538][ T4994] R10: 00000000000050e7 R11: 0000000000000246 R12: 00007fcc053a5430
[ 68.864616][ T4994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 68.872621][ T4994]
[ 68.875698][ T4994] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 68.883078][ T4994] CPU: 0 PID: 4994 Comm: syz-executor960 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0
[ 68.893486][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 68.903540][ T4994] Call Trace:
[ 68.906830][ T4994]
[ 68.909759][ T4994] dump_stack_lvl+0x1e7/0x2d0
[ 68.914455][ T4994] ? nf_tcp_handle_invalid+0x650/0x650
[ 68.919933][ T4994] ? panic+0x770/0x770
[ 68.924097][ T4994] ? vscnprintf+0x5d/0x80
[ 68.928433][ T4994] panic+0x30f/0x770
[ 68.932337][ T4994] ? __warn+0x171/0x4a0
[ 68.936509][ T4994] ? __memcpy_flushcache+0x2b0/0x2b0
[ 68.941820][ T4994] __warn+0x314/0x4a0
[ 68.945808][ T4994] ? btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.952496][ T4994] report_bug+0x2b3/0x500
[ 68.956826][ T4994] ? btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.963503][ T4994] handle_bug+0x3d/0x70
[ 68.967673][ T4994] exc_invalid_op+0x1a/0x50
[ 68.972172][ T4994] asm_exc_invalid_op+0x1a/0x20
[ 68.977027][ T4994] RIP: 0010:btrfs_create_pending_block_groups+0x1015/0x1260
[ 68.984321][ T4994] Code: 00 0f 2c 8b ba 39 0a 00 00 44 89 f9 e8 94 86 01 07 e9 26 f5 ff ff e8 6a 5c df fd 48 c7 c7 80 0e 2c 8b 44 89 fe e8 db db a6 fd <0f> 0b e9 d5 fe ff ff e8 4f 5c df fd 48 c7 c7 80 0e 2c 8b 44 89 e6
[ 69.004023][ T4994] RSP: 0018:ffffc900039bf6e0 EFLAGS: 00010246
[ 69.010104][ T4994] RAX: 16975f9793f65200 RBX: ffff88807384c001 RCX: ffff888028d68000
[ 69.018094][ T4994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 69.026073][ T4994] RBP: ffffc900039bf978 R08: ffffffff81530142 R09: fffff52000737e91
[ 69.034053][ T4994] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 69.042034][ T4994] R13: ffff888015fde9c0 R14: dffffc0000000000 R15: 00000000ffffffe4
[ 69.050024][ T4994] ? __warn_printk+0x292/0x360
[ 69.054820][ T4994] ? __lock_acquire+0x1316/0x2070
[ 69.059883][ T4994] ? btrfs_inc_block_group_ro+0x5a4/0x610
[ 69.065630][ T4994] ? fill_dummy_bgs+0x2a0/0x2a0
[ 69.070496][ T4994] ? btrfs_block_rsv_add+0xb1/0xc0
[ 69.075671][ T4994] ? __lock_acquire+0x2070/0x2070
[ 69.080706][ T4994] ? do_raw_spin_lock+0x14d/0x3a0
[ 69.085754][ T4994] ? __mutex_unlock_slowpath+0x21c/0x750
[ 69.091410][ T4994] ? mutex_unlock+0x10/0x10
[ 69.095933][ T4994] ? btrfs_trans_release_metadata+0x153/0x1b0
[ 69.102019][ T4994] __btrfs_end_transaction+0x150/0x640
[ 69.107496][ T4994] btrfs_inc_block_group_ro+0x5ac/0x610
[ 69.113069][ T4994] btrfs_relocate_block_group+0x43b/0xd70
[ 69.118820][ T4994] btrfs_relocate_chunk+0x12c/0x3b0
[ 69.124040][ T4994] __btrfs_balance+0x1b06/0x2690
[ 69.129027][ T4994] ? describe_balance_start_or_resume+0x490/0x490
[ 69.135520][ T4994] ? do_wait_for_common+0x590/0x5f0
[ 69.140742][ T4994] ? do_raw_spin_unlock+0x13b/0x8b0
[ 69.145959][ T4994] ? validate_convert_profile+0x7d/0x2c0
[ 69.151609][ T4994] btrfs_balance+0xbdb/0x1120
[ 69.156402][ T4994] btrfs_ioctl_balance+0x493/0x7c0
[ 69.161528][ T4994] ? btrfs_ioctl+0xb88/0xd40
[ 69.166140][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 69.172750][ T4994] __se_sys_ioctl+0xf1/0x160
[ 69.177360][ T4994] do_syscall_64+0x41/0xc0
[ 69.181813][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 69.187724][ T4994] RIP: 0033:0x7fcc053e5b09
[ 69.192153][ T4994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 69.211779][ T4994] RSP: 002b:00007ffc08bb1b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.220206][ T4994] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fcc053e5b09
[ 69.228184][ T4994] RDX: 0000000020001200 RSI: 00000000c4009420 RDI: 0000000000000004
[ 69.236190][ T4994] RBP: 00007fcc053a53a0 R08: 0000000000000000 R09: 0000000000000000
[ 69.244170][ T4994] R10: 00000000000050e7 R11: 0000000000000246 R12: 00007fcc053a5430
[ 69.252155][ T4994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 69.260235][ T4994]
[ 69.263688][ T4994] Kernel Offset: disabled
[ 69.268104][ T4994] Rebooting in 86400 seconds..